NVD

Id
61492  
Name
CVE-2006-2807  
Description
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-06-05  
Modified Date
2008-09-05  
Seq
2006-2807  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318087 61492 CVE-2006-2807 1037  View
318088 61492 CVE-2006-2807 20060527 Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit  View
318089 61492 CVE-2006-2807 18170  View
318090 61492 CVE-2006-2807 speedyaspforum-user-account-manipulation(26811)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61537 JVNDB-2006-003803 ASPwebSoft Speedy Asp Discussion Forum における任意のアカウントのパスワードを変更される脆弱性 ASPwebSoft Speedy Asp Discussion Forum には、任意のアカウントのパスワードを変更される脆弱性が存在します。 CVE-2006-2807 18909 CVE-2006-2807 61492 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003803.html 2006-06-05 2013-12-26 View